Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
File:                     7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft (raw, json)
Hash identifier:          NhG1CTy0BYOVSMlvzUFhvFM5qnqt5PziFGuPmwXBh34=
Subject key identifier:   D8:5B:84:AE:86:06:70:BC:F9:E3:5D:56:BC:46:48:DE:47:29:2C:EF
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Certificate issuer:       /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial:       019EBE479E4E48DC10A36739CE3CABEBDAB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
Manifest number:          16FC
Signing time:             Sat 13 Jun 2026 00:00:24 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:24 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:24 +0000
Files and hashes:         1: 1-eh-1pXGI5Cgf4EfxZ3-rrSgEiA.roa (hash: j6+XhxL67BgzWzBRQ/eSUIWdiMYbHn8AWKsJCtSBwfk=)
                          2: 7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl (hash: hwiO0lm3CVQUcwuhxiSlLRCfV+5UV5b0TdoJxmY9el4=)
                          3: DoUjRDq4f4RlSd01A91vUzIaXbc.roa (hash: WDggBQaa6iXBE9B1fTjOHIHynycu3WL+FvqiiQoyk0M=)
                          4: VjhD-33L8agb2sUN7_8E1MUQu30.roa (hash: +is+iqqsPVQNtEF4G99dNd9M/DNhLlbQFjjY7fXbc8w=)
                          5: jbel_872plfGoKA9YwYLfXTnbKA.roa (hash: uorV1dM+0LVUebt/LsRmXGvEIO0+6YrUmXE7E+mdUis=)
                          6: q4oN2BO3zVzi1i6FgZhsiTKmbp0.roa (hash: H4dgz5ZVy/zNiZhqQoK2HNhOum6qpmd2e9FuFavD3cU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:9e:4e:48:dc:10:a3:67:39:ce:3c:ab:eb:da:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
        Validity
            Not Before: Jun 13 00:00:24 2026 GMT
            Not After : Jun 14 00:00:24 2026 GMT
        Subject: CN=d85b84ae860670bcf9e35d56bc4648de47292cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:97:bb:4d:42:d7:7e:72:a6:02:f6:68:b8:74:
                    f0:a8:6a:0e:01:35:ef:05:70:b2:ba:cb:ca:2e:93:
                    66:c9:a5:4d:a0:0a:a8:8c:6c:ab:14:38:c2:6b:3b:
                    13:2c:b3:f0:fb:c9:d0:67:81:ac:bf:b0:82:b5:7b:
                    26:0c:47:4c:c5:b1:83:b1:af:70:93:1e:f9:15:dd:
                    2c:33:51:5a:3b:07:77:eb:3c:ae:03:a7:c2:66:69:
                    1b:54:3e:2a:99:cc:b6:b7:7c:fd:af:cf:9f:12:64:
                    37:dd:04:33:3c:41:95:b0:f8:90:81:39:d3:19:7e:
                    22:f7:5f:fc:a1:71:d6:98:69:17:fd:d7:8c:b1:f0:
                    41:76:31:ad:a4:2e:e6:eb:dc:35:44:79:55:56:10:
                    3b:e1:82:24:d6:4a:61:07:98:fd:e9:74:64:85:d1:
                    9c:b6:4c:93:0c:6c:25:85:bf:d1:30:26:31:29:b5:
                    2b:17:1a:0e:e1:f6:77:0e:48:d3:5c:10:f5:91:d3:
                    e0:a8:43:73:83:bc:ea:d1:78:64:eb:02:a1:10:07:
                    af:f9:ef:e3:7a:76:63:1d:f6:40:a4:a5:af:ed:c1:
                    ec:54:15:66:38:bc:f1:3a:9b:87:1b:ed:f1:fc:59:
                    33:e5:c9:1b:27:a8:38:a4:55:d5:d6:9e:05:3b:2a:
                    41:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5B:84:AE:86:06:70:BC:F9:E3:5D:56:BC:46:48:DE:47:29:2C:EF
            X509v3 Authority Key Identifier:
                keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:1e:e6:8e:76:9a:1b:0d:0d:e9:e4:51:e2:6f:c3:b0:8e:f9:
         b4:87:77:12:1f:92:e1:d8:b6:ad:b7:c4:84:89:da:cd:ce:69:
         15:b8:b3:ed:80:30:ae:e6:1d:f9:36:94:f3:ea:f4:7c:03:76:
         0c:58:58:b2:a4:dd:9b:26:cd:47:48:9d:da:f4:e3:a9:14:4d:
         69:58:71:53:ee:46:be:c0:e0:d6:1a:3c:14:70:e4:af:c0:8a:
         d4:9c:73:e3:c1:da:9f:03:3c:06:35:da:e3:a3:71:63:1a:6e:
         ec:48:c1:8d:77:e5:1f:c0:1f:8c:28:1a:72:4c:45:e4:b9:cb:
         0c:38:c4:28:cf:98:b2:3e:32:50:81:71:d5:a1:77:ef:dc:1d:
         4e:6e:2d:ca:8d:cc:07:22:25:ee:b9:44:2d:d1:c7:38:36:cf:
         8e:bd:3b:fb:24:c3:4f:70:ad:c8:b7:ec:fb:f8:86:dc:f6:87:
         8d:4d:30:fa:39:f9:6e:2e:64:0b:3e:15:50:e9:24:bd:bf:40:
         81:c4:a4:24:72:a9:8a:8e:89:38:c5:b9:bb:40:34:76:d0:04:
         73:0a:f6:a4:1f:a1:fa:28:6c:5e:38:fe:47:74:9a:10:da:2c:
         ca:87:13:49:8f:5b:7d:55:d6:13:22:a4:b6:93:2c:dc:77:58:
         2d:a1:39:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:05:54 2026 by rpki-client